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EXECUTIVE  SUMMARY 


Design  for  testability  is  motivated  by  the  need  to  reduce  the  costs 
associated  with  testing  and  maintaining  a  digital  system  over  its  working 
life.  These  costs  depend  on  many  interrelated  factors  which  are  poorly 
understood  and  difficulty  to  quantify.  Major  testability  considerations 
Include  test  generation  difficulty,  test  sequence  length,  test  applica¬ 
tion  cost,  fault  coverage  and  fault  resolution.  Testability  can  also  be 
measured  indirectly  with  much  less  computational  effort  in  terms  of  two 
general  circuit  properties  called  controllability  and  observability.  Sev¬ 
eral  computer  programs  have  been  written  recently  that  compute  controll¬ 
ability  and  observability  measures  for  a  given  circuit.  These  programs 
provide  practical  tools  for  comparing  the  testability  of  different  designs, 
and  can  also  be  used  to  indicate  testing  bottlenecks  within  circuits.  The 
use  of  such  programs  is  very  limited  at  present. 

Two  approaches  to  design  for  testability  have  evolved:  ad  hoc  design 
rules  to  improve  the  testability  of  a  given  logic  circuit,  and  general  de¬ 
sign  approaches  with  testability  as  the  primary  design  objective.  The  use 
of  test  and  control  points  which  attempt  to  improve  local  observability  and 
controllability,  respectively,  is  one  of  the  most  useful  of  the  ad  hoc  de¬ 
sign  guidelines.  Suitable  sites  for  test  points  can  readily  be  determined, 
and  include  flip-flop  set/ reset  lines,  deeply  buried  components,  points  of 
high  fan-in  or  fan-out  such  as  major  buses, and  logically  redundant  subcir¬ 
cuits.  The  principal  limitation  on  this  technique  is  the  small  number  of 
extra  10  pins  or  connectors  available  for  testing  purposes.  Testability 
can  also  be  improved  by  restructuring  a  circuit,for  example,  by  opening 
feedback  loops  or  other  strongly  connected  subcircuits  during  testing.  Ad¬ 
ditional  important  design  rules  include  the  avoidance  of  asynchronous  tim¬ 
ing,  and  the  provision  of  a  mechanism  whereby  a  tester  can  override  or  syn¬ 
chronize  with  the  internal  clock  of  the  circuit  under  test. 

Because  testability  involves  many  tradeoffs,  very  few  general  design 
techniques  are  known  that  yield  highly  testable  circuits  without  sacrific¬ 
ing  other  Important  practical  considerations.  The  most  promising  of  these 
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are  are  the  scan-in/scan-out  methods  represented  by  IBM's  LSSD  (Level  Sen¬ 
sitive  Scan  Design)  technique.  The  basic  idea  of  scan-in/scan-out  is  to 
design  a  circuit  so  that  its  memory  elements  can  be  linked  together  to 
form  a  shift  register  SR  during  testing.  This  allows  the  circuit's  state 
(the  contents  of  SR)  to  be  directly  controlled  and  observed  by  an  external 
tester.  Since  access  to  SR  is  serial,  only  one  or  two  extra  pins  are  re¬ 
quired.  Furthermore,  most  of  the  circuit  is  seen  as  a  (large)  combinational 
circuit,  for  which  test  pattern  generation  is  relatively  easy.  LSSD-type 
circuits  have  the  disadvantage  of  requiring  rather  long  testing  times; 
they  are  also  impractical  for  circuits  such  as  RAM  chips  that  contain 
thousands  of  memory  elements.  Another  promising  design  approach  of  more 
limited  applicability  Is  bit-slicing.  Bit-sliced  systems  consist  of  an 
array  of  identical  elements  called  (bit)  slices.  The  individual  slices 
are  relatively  easy  to  test,  and  tests  for  an  array  can  be  easily  derived 
from  those  of  a  slice. 

Over  the  next  five  years  it  is  likely  that  increased  attention  will 
be  paid  to  design  for  testability  because  of  the  rapid  increases  in  chip 
complexity  resulting  from  VLSI  technology.  The  use  of  computer  programs 
that  evaluate  the  testability  of  unstructured  designs  is  likely  to  increase. 
However,  structured  design  like  LSSD  and  bit-slicing  lead  to  systems  that 
are  easy  to  design  and  test,  and  may  displace  unstructured  designs  in  many 
applications.  Scan-in/scan-out  methods  like  LSSD,  and  related  methods  like 
Selective  Control,  will  become  more  widely  used.  They  meet  some  of  the  major 
constraints  imposed  by  VLSI  technology,  and  allow  current  test  generation 
methods  like  the  D-algorithm  to  be  used  effectively.  Not  all  circuits  are 
suitable  for  scan-1 n/scan-out  designs,  particularly  circuits  with  very  large 
numbers  of  memory  elements.  Different  approaches  which  will  probably  em¬ 
ploy  self- testing  will  be  required  in  such  cases. 


1.  INTRODUCTION 


This  report  surveys  the  techniques  that  can  be  used  for  designing 
easily  testable  logic  circuits.  The  scope  of  the  report  is  limited  to 
methods  that  require  the  use  of  external  test  equipment.  The  design  of 
self-testing  circuits  (built-in  test  equipment  or  BITE)  and  the  use  of 
error-detecting  codes  will  be  covered  in  separate  reports.  This  report 
is  also  restricted  to  logic  design  considerations;  electrical,  or  mech¬ 
anical  and  other  aspects  of  physical  design  which  influence  testability 
are  not  considered. 

The  motivation  for  designing  easily  testable  circuits  is  to  reduce 
the  costs  of  test  pattern  generation,  fault  detection  both  during  manu¬ 
facture  and  in  the  field,  and  fault  isolation  and  repair.  These  costs 
depend  on  many  interacting  design  factors  whose  relationship  are  by  no 
means  well  understood.  Thus  the  concept  of  design  for  testability  is 
quite  difficult  to  quantify.  Chapter  2  deals  with  the  problem  of  meas¬ 
uring  testability.  The  factors  influencing  testability  are  discussed, 
two  of  which,  controllability  and  observability,  have  proven  to  be  the 
easiest  to  measure.  Two  computer  programs  TMEAS  and  SCOAP  which  were 
developed  for  evaluating  testability  in  practical  circuits  are  discussed 
in  this  chapter. 

The  techniques  for  obtaining  easily  testable  designs  may  be  divided 
into  two  broad  classes 

(1)  Methods  for  Improving  the  testability  of  an  existing 
design; 

(2)  General  design  methods  whose  primary  objective  is  ease 
of  testing. 

Chapter  3  is  concerned  with  the  first  of  these  approaches,  and  presents 
a  catalogue  of  design  modification  methods  for  enhancing  testability, 
including  test  and  control  point  Insertion  and  circuit  restructuring. 
These  techniques  are  typically  used  in  heuristic  fashion,  and  their  im¬ 
pact  on  the  overall  testability  of  a  circuit  is  difficult  to  estimate. 
Chapter  4  deals  with  general  design  methods  that  attempt  to  construct 
circuits  that  are  a  priori  easy  to  test.  These  methods  employ  special 
circuit  structures  that  simplify  test  pattern  application  and  response 


5 


evaluation.  A  general  and  very  useful  design  philosophy  called  scan-in/ 
scan-out  is  examined.  Another  structured  approach  to  design  for  test¬ 
ability  based  on  bit  slicing  is  also  discussed.  The  report  concludes  with 
an  extensive  bibliography. 


2.  TESTABILITY  MEASURES 


The  classification  of  a  circuit  as  easily  testable  implies  the  ex¬ 
istence  of  objective  criteria  for  judging  testability.  In  practice,  test¬ 
ability  measures  are  needed  which  can  be  applied  to  relatively  complex 
circuits,  and  which  do  not  require  an  excessive  amount  of  computation. 

This  chapter  reviews  and  evaluates  the  main  testability  measures  that 
have  been  proposed  for  digital  logic  circuits.  In  Sec.  2.1  the  test¬ 
ing  characteristics  of  a  circuit  that  can  be  used  as  for  measuring  test¬ 
ability  are  discussed  in  general  terms.  Section  2.2  considers  specific 
quantitative  measures  based  on  the  concepts  of  controllability  and  observ¬ 
ability,  which  form  the  basis  of  some  practical  computer  programs  for 
testability  evaluation.  The  chapter  concludes  with  a  brief  evaluation  of 
these  programs. 

2. 1  General  Measures 

Figure  2.1  lists  five  of  the  main  factors  that  influence  circuit 
testing.  The  cost  cQ  of  test  generation  is  the  cost  of  computing  the 
input  test  stimuli  and  output  response  sequences  required  in  the  given 
testing  environment.  If  this  test  data  is  obtained  via  a  computer  pro¬ 
gram  such  as  LASAR  or  the  D-algorithm  [Breuer  and  Friedman  1976],  then 
c6  may  be  equated  to  the  cost  of  developing  and  running  the  test  genera¬ 
tion  program.  The  test  sequence  length  cost  cL  may  be  measured  by  the 
(average  or  maximum)  number  of  test  patterns  used  or,  equivalently,  by 
the  (average  or  maximum)  time  required  to  apply  these  tests  to  the  unit 
under  test  (UUT).  The  cost  cA  of  applying  the  tests  includes  the  hard¬ 
ware  and  software  overhead,  both  in  external  and  built-in  test  equipment, 
required  to  store  the  test  data  (if  necessary),  apply  input  stimuli  to 
the  UUT,  and  verify  the  resulting  responses.  The  remaining  factors  listed 
in  Fig.  2.1  are  measures  of  the  effectiveness  with  which  the  circuit  is 
tested.  Equivalently,  they  can  be  regarded  as  measures  of  the  confidence 
that  can  be  placed  in  a  test  applied  to  the  UUT.  The  fault  coverage  e^ 

refers  to  the  percentage  of  possible  faults  that  are  detectable  by  a  givert 
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•  Cost  of  Test  Generation  cG 

•  Test  Sequence  Length  cL 

•  Test  Application  Cost  cA 

•  Fault  Coverage  ec 

•  Fault  Resolution  eR 


Fig.  2.1.  Factors  determining  the  testability  of  a  digital 
circuit. 
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test  procedure.  Finally,  the  fault  resolution  eR  is  the  ability  of  the 
test  procedure  to  locate  or  isolate  faults  to  specified  parts  of  the  sys¬ 
tem. 

In  general,  it  is  desirable  to  minimize  the  cost  factors  Cq,  cl  and 
c A  while  maximizing  the  effectiveness  factors  e^  and  eR.  Unfortunately, 
there  are  complex  and  poorly-understood  tradeoffs  involved  which  make  it 
extremely  difficult  to  optimize  these  various  factors  simultaneously.  Fur¬ 
thermore,  it  is  difficulty  to  separate  the  inherent  testability  of  a  cir¬ 
cuit  from  the  methods  used  to  test  it.  For  example,  certain  combinational 
circuits  used  in  coding  logic  have  extremely  high  test  generation  :st  Cq 
if  the  standard  D-algorithm  is  used  [Goel  1981],  Tests  generate  v  the 
D-algorithm  are  typically  characterized  by  low  values  of  cL,  but  h  val¬ 
ues  of  cA  since  the  test  equipment  must  store  all  the  test  data  :  On 

the  other  hand,  provided  the  number  of  input  lines  n  is  moderate,  say  ns 32, 
any  combinational  circuit  can  be  tested  by  exhaustively  applying  all  2n  pos¬ 
sible  input  patterns.  While  this  tends  to  maximize  the  cost  c^,  it  greatly 
reduced  cQ  because  the  required  input  patterns  can  be  generated  during  the 
testing  process  itself  by  a  simple  hardware  or  software  counter.  Figure 
2.2  summarizes  the  effect  of  these  representative  test  generation  methods 
on  the  testability  requirements  of  combinational  circuits. 

In  addition,  note  that  for  exhaustive  testing  the  costs  cG  and  cL  are 
not  influenced  by  the  circuit  structure,  which  is  not  true  for  test  genera¬ 
tion  using  the  D-algorithm.  Also  adding  one  more  input  to  a  circuit  would 
double  the  value  of  c^  for  exhaustive  testing,  but  would  probably  have  a 
small  Impact  on  cL  when  using  the  D-algorithm. 

The  foregoing  example  illustrates  the  difficulty  of  quantifying  test¬ 
ability  or  reducing  it  to  a  simple  universal  formula.  In  many  situations, 
testability  is  most  usefully  defined  in  general  quantitative  terms,  the  fol¬ 
lowing  definition  being  a  good  example  [Anon.  1980]: 

Testability  [is]  a  design  characteristic  which  allows  the 
status  {operable,  inoperable  or  degraded)  of  a  unit  (system, 
subsystem,  module  or  component)  to  be  confidently  determined 
in  a  timely  fashion. 

The  same  authors  define  design  for  testability  as  follows: 
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Testability  Factor 


Testing  Method 


t 

D-algorithm 

Exhaustive 

Test  Generation  Cost  cG 

very  high 

very  low 

Test  Sequence  Length  c. 

fairly  low 

very  high 

Test  Application  Cost  cA 

high 

fairly  low 

Fault  Coverage  ec 

good 

very  good 

Fault  Resolution  eR 

good 

very  good 

Fig.  2.2. 


Impact  of  two  testing  methods  used  for  combina¬ 
tional  circuits  on  various  testability  factors. 
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A  design  process  such  that  deliberate  design  effort  is  expended 
to  assure  that  a  product  may  be  thoroughly  tested  with  minimum 
effort  and  cost,  and  that  high  confidence  may  be  ascribed  to  the 
test  results. 

In  the  following  section  we  review  some  more  specific  quantitative  measures 
of  a  design's  testability. 

In  principle,  the  various  testability  measures  listed  in  Fig.  2.1  can 
be  computed  for  arbitrary  circuits  by  actually  generating  the  test  stimuli 
and  responses  for  the  circuit,  and  (exhaustively)  analyzing  this  test  data 
to  obtain  parameters  such  as  the  fault  resolution  eR.  In  practice,  the 
cost  of  this  approach  is  prohibitive,  particularly  if  a  number  of  different 
implementations  of  a  given  function  are  to  be  evaluated.  A  more  practical 
approach  is  to  determine  some  circuit  properties  that  (a)  can  be  computed 
at  reasonable  cost,  and  (b)  provide  a  reasonable  indication  of  overall 
testability,  or  pin-point  parts  of  a  circuit  that  may  be  difficult  to  test. 
This  is  the  basis  of  several  practical  testability  measurements  developed 
in  the  last  few  years  and  discussed  in  the  following  section. 

2.2  Controllability  and  Observability 

Consider  the  task  of  generating  a  test  sequence  T  for  a  fault  F  asso¬ 
ciated  with  a  particular  internal  line  or  (signal)  node  N  in  a  complex  cir¬ 
cuit  C.  To  be  a  test  for  F,  the  test  T  must  satisfy  the  following  two  con¬ 
straints: 

(1)  It  must  allow  the  tester  to  control  the  state  of  N  so  that  signal 
values  that  sensitize  C  to  the  presence  of  F  can  be  applied  to  N. 

(2)  It  must  allow  any  error  signals  produced  at  N  to  be  observed  at 
a  primary  output  line  of  C.  This  requires  T  to  establish  conditions  per¬ 
mitting  an  error  signal  to  propagate  from  the  fault  site  N  to  an  observable 
output. 

Thus  the  controllability  and  observability  of  N  provide  useful  indications 
of  the  influence  of  N  on  the  testability  of  C.  The  testability  measurement 
methods  considered  here  all  attempt  to  quantify  node  controllability  and  ob¬ 
servability,  and  use  average  or  maximum  values  of  these  parameters  to  esti¬ 
mate  overall  circuit  testability. 
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The  use  of  heuristic  controllability  and  observabi 1 i ty  measures  to 
guide  test  generation  methods  of  th*>  D-algorithm  type  was  suggested  about 
ten  years  ago  [Rutman  1972].  Rutman's  scheme  has  recently  been  extended 
by  Breuer  for  a  proposed  functional  test  generation  program  called  TEST/80 
[Breuer  1979].  Three  cost  values  cA,  cA  and  dA  are  associated  with  each 
line  A  that  is  an  output  of  a  component  E.  cA  and  cA  denote  the  cost  of 
setting  A  to  1  and  0,  respectively,  while  dA  is  the  cost  of  driving  an 
error  signal  D  from  A  to  a  primary  output  of  the  circuit  under  test.  cA 
is  defined  by  the  equation 

cA  =  min£cfA  + csA+ cdA,  K] 

where  cfA  and  cdA  depend  on  the  type  of  the  component  E,  and  csA  is  a  "side 
effects"  cost  due  to  fan-out  from  A.  K  is  a  large  default  value.  cA  and 
dA  are  defined  similarly.  Algorithms  have  been  developed  to  compute  these 
cost  functions  for  all  standard  components;  these  can  be  used  to  compute 
the  costs  associated  with  all  the  lines  of  a  circuit.  Although  this  work 
has  not  been  implemented,  it  appears  to  have  strongly  influenced  the  work 
of  Goldstein,  which  is  discussed  in  detail  later  in  this  section  [Goldstein 
1979].  Theoretical  work  on  computing  circuit  signal  probabilities  in  com¬ 
binational  circuits  is  also  closely  related  to  the  use  of  controllability 
and  observability  measures  [Parker  and  McCluskey  1975,  Azema  et  al.  1977, 
Oussault  1978].  The  formulation  of  controllability  and  observability  func¬ 
tions  in  terms  of  the  Boolean  difference  has  also  been  proposed  recently 
[Susskind  1981]. 

TMEAS 

Stephenson  and  Grason  of  Carnegi e-Mel Ion  University  developed  a  test¬ 
ability  measurement  method  intended  for  logic  circuits  described  at  the 
register-transfer  level  [Stephenson  and  Grason  1976].  This  work  was  con¬ 
tinued  by  Grason  at  Bell  Laboratories,  and  resulted  in  a  computer  program 
for  testability  evaluation  called  TMEAS  [Grason  1978],  The  basis  of  this 
approach  is  to  associate  an  Input  controllability  value  CY  and  an  output 
observability  value  OY  with  each  component  and  line  of  the  circuit  C  under 
consideration.  CY  and  OY  are  real  numbers  between  0  and  1.  A  primary 
input  line  has  the  maximum  controllability  CY»  1,  while  a  primary  output 
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line  has  the  maximum  observability  0Y=  1.  The  CY  and  OY  values  of  all  lines 
are  computed  by  combining  rules  that  view  controllability  as  "flowing,”  and 
becoming  diminished  as  it  flows,  from  the  primary  inputs  to  the  primary  out¬ 
puts  of  C,  while  observability  flows  in  the  opposite  direction.  In  order 
to  determine  the  effect  of  a  particular  component  on  controllability/observ¬ 
ability  flow,  two  quantities  called  CTF/OTF  (controllability/observability 
transfer  function)  must  be  computed.  Somewhat  complex  formulas  were  ob¬ 
tained  by  Stephenson  and  Grason  for  exact  calculation  of  CTF  and  OTF.  These 
transfer  functions  are  basically  measures  of  the  uniformity  of  the  input- 
output  relations  of  the  component.  In  the  subsequent  TMEAS  program  more 
easily  computed  approximations  to  these  functions  were  used. 


,  nog 


NV0Gj-1 

J 

2  I NIGO -  -  -  NIV/NVOG .  | 
i  *  0  1J  J 

2 ( NIV  -  NIV/NVOG.) 


where 

NOG  a  Number  of  groups  (e.g.,  buses)  of  output  lines 

NVOG.  *  Number  of  allowed  values  on  output  group  j 

J 

NIV  =  Number  of  allowed  input  values 

NIGO, .  =  Number  of  input  values  for  which  output 
J  group  j  has  output  value  i 


Fig.  2.3.  Formula  developed  by  Stephenson  and  Grason  for  calculat¬ 
ing  a  component's  controllability  transfer  function  CTF. 


Figure  2.3  shows  the  exact  formula  for  CTF  devised  by  Stephenson  and 
Grason;  a  similar  formula  is  used  to  compute  OTF.  In  the  case  of  combina¬ 
tional  components,  CTF  and  OTF  can  be  computed  directly  from  the  component's 
truth  table.  For  example,  if  we  apply  the  CTF  formula  to  an  n-input  NANO 
gate  we  obtain 
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NOG  *  1 


NVOGj  *  2  (j=l) 

NIV  »  2n 

NIGOq1  =  1,  NIGOu  -  2n-l 
from  which  it  follows  that 


CTF  =  l/2n_1  (2.1) 

This  very  small  controllability  is  indicative  of  the  difficulty  of  pro¬ 
ducing  a  1  on  the  output  of  a  NAND  gate.  It  also  implies  that  an  (n+1)- 
input  gate  is  less  controllable  than  an  n-input  gate,  a  questionable  pro¬ 
perty  of  the  CTF.  THe  CTF  and  OTF  of  a  sequential  component  is  calculated 
by  breaking  its  feedback  loops  to  convert  it  into  a  (pseudo-)  combinational 
circuit.  Once  the  CTF  and  OTF  of  a  component  are  known,  the  controllabil¬ 
ity  and  observability  of  its  input/output  lines  can  be  calculated  as  fol¬ 
lows: 


(2-2) 

0Yinputs  ~  ^outputs  *  0TF 

Special  circuit  models  are  needed  to  handle  wired  logic  and  bidirectional 
lines. 

TMEAS  can  provide  testability  data  for  board-level  circuits  quite 
rapidly;  e.g.,  3  secs,  of  CPU  time  were  required  on  an  Amdahl  470  V/7  to 
analyze  a  circuit  having  70  IC's  [Grason  1978].  It  has  been  used  to  Iden¬ 
tify  good  locations  for  test  points  (Indicated  by  values  of  CY  or  OY  near 
zero),  and  measure  the  relative  improvement  In  testability  resulting  from 
the  Insertion  of  the  Indicated  test  points.  TMEAS  is  currently  available 
only  for  internal  use  at  Bell  Laboratories. 
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SCOAP 


More  recently,  Goldstein  of  Sandia  Laboratories  developed  another 
technique  for  characterizing  the  controllability  and  observability  of  a 
digital  circuit  [Goldstein  1979].  This  has  been  implemented  in  a  com¬ 
puter  program  called  SCOAP  (Sandia  Control! abil i ty/Observabi 1 i ty  Analysis 
Program)  [Goldstein  and  Thigpen  1980].  Six  functions  are  used  to  char¬ 
acterize  each  line  or  signal  node  N  of  the  circuit;  three  functions  Indi¬ 
cate  the  difficulty  of  controlling  or  observing  N  from  a  combinational 
viewpoint,  while  the  other  three  employ  a  sequential  viewpoint.  A  node 
is  referred  to  as  combinational  if  it  is  a  primary  input  line,  or  an  out¬ 
put  line  of  a  combinational  component  such  as  a  gate.  It  is  called  se¬ 
quential  if  it  is  an  output  line  of  a  sequential  element,  like  a  flip- 
flop.  The  function  CC°(N)  and  CC*(N)  are  related  to  the  minimum  number 
of  combinational  nodes  whose  values  must  be  assigned  in  order  to  produce 
a  0  or  a  1,  respectively,  at  N.  C0(N)  is  related  to  the  number  of  combin¬ 
ational  node  assignments  required  to  propagate  a  logic  signal  from  N  to  a 
primary  output  Z  of  the  circuit,  and  also  to  the  number  of  components  be¬ 
tween  N  and  Z.  The  three  sequential  functions  SC°(N),  SC^N)  and  S0(N) 
are  defined  analogously,  with  sequential  nodes  replacing  combinational 
nodes  in  the  preceding  definitions. 

The  six  SCOAP  controllability/observability  functions  "flow"  through 
a  circuit  in  much  the  same  way  as  the  CY/CO  measures  of  Stephenson  and 
Grason.  The  values  at  any  primary  input  line  X  are  defined  by  the  equa¬ 
tions: 


CC°(X)  =  cc:(x)  =  1 
SC°(X)  =  SC1(X)  *  0 

while  at  a  primary  output  line  Z  we  have 

C0(Z)  *  S0(Z)  »  0 
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To  determine  any  of  the  controllability  function  values  of  an  output  line 
Y  of  a  circuit  component  or  "standard  cell,"  all  possible  input  assign¬ 
ments  that  give  the  desired  value  on  Y  are  examined,  and  the  sum  of  the 
corresponding  controllability  function  values  of  the  inputs  is  computed. 

The  minimum  of  these  sums  incremented  by  a  number  representing  the  cell 
depth  is  taken  as  the  controllability  of  Y.  Similarly,  the  observability 
of  an  input  node  W  of  a  cell  is  taken  to  be  the  sum  of  the  following  three 
numbers:  the  minimum  value  of  the  corresponding  observability  function 
which  appears  on  some  cell  output  node  Y,  the  minimum  sum  of  the  cell  in¬ 
put  controllability  values  required  to  sensitize  Y,  and  the  cell  depth. 
Goldstein  provides  somewhat  heuristic  rules  for  computing  these  functions, 
which  are  analogous  to  the  CTF/OTF  functions  of  TMEAS. 

As  an  example,  consider  an  n-input  NAND  gate  G  with  inputs  Xi^,..., 
Xn  and  output  Y.  The  combinational  and  sequential  depths  of  G  are  assumed 
to  be  1  and  0,  respectively.  In  order  to  apply  0  to  Y,  all  inputs  must  be 
1,  hence 


CC°(Y)  *  S  CC1(XJ  +  1  (2.3) 

i  *  1  1 


SC°(Y)  *  S  SC1(X, ) 
i  *  1 


Y  can  be  set  to  1  by  setting  any  of  the  n  inputs  to  0,  therefore 

CC1(Y )  »  minfCC°(X4 )} + 1  (2.4) 

i  1 


SCX( Y )  »  min{SC°(X<)} 
i  1 
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If  the  inputs  of  G  are  all  primary  input  lines  then  Eqs.  (2.3)  and  (2.4) 
become 

CC°(Y)  =  n  +  1 
CC1(Y)  =  2 

The  corresponding  controllability  measure  given  by  Eqs.  (2.1)  and  (2.2) 
for  TMEAS  is 

CY(Y)  *  l/2n_1 

The  observability  functions  for  each  input  line  X..  of  G  are  calculated 
from  the  following  formulas 

n  i 

CP(X.)  =  C0(Y)+  S  CC^XJ  +  I 
1  j-1  J 

n  l 

S0(x.)  =  S0(Y) +  E  SCx(X.) 

1  j  =  1  J 

j  t  i 

which  reflect  the  fact  that,  in  order  to  sensitize  Y  to  changes  in  X^ , 
all  input  lines  Xj  where  j f  i  must  be  set  to  1. 

SCOAP  was  programmed  on  a  DEC-10  computer,  and  typical  run  times 
of  3.5  min  for  a  200-cell  circuit  were  obtained  [Goldstein  1979].  Fig¬ 
ure  2.4  shows  an  example  of  a  7-stage  feedback  shift  register  analyzed 
by  this  program.  The  results  obtained  are  shown  in  Figs.  2.5  and  2.6 
in  the  form  of  circuit  "profile"  diagrams.  These  are  Intended  to  char¬ 
acterize  overall  testability  of  the  circuit,  and  pin-point  regions  of 
low  controllability  or  observability  for  possible  improvement.  The  var¬ 
ious  controllability  or  observability  function  values  are  plotted  on  the 
horizontal  axis,  while  the  number  of  nodes  having  a  particular  value  are 
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plotted  on  the  vertical  axis.  As  expected,  the  points  appearing  on  the 
left  of  the  controllability  diagrams  of  Fig.  2.4  represent  nodes  close 
to  the  primary  inputs  of  the  circuit.  The  worst  case  occurs  for  the  node 
FB111  which  is  driven  by  a  feedback  path  of  maximum  length;  this  is  also 
as  expected.  The  observability  profiles  of  Fig.  2.5  indicate  that  the 
deeply-buried  node  CNT109  is  significantly  less  observable  than  the  other 
nodes,  suggesting  that  it  is  a  good  candidate  to  be  a  test  point. 

The  overall  testability  of  a  circuit  can  be  measured  by  the  maximum 
values  of  the  various  controllability  and  observability  functions.  For 
example,  in  the  circuit  of  Fig.  2.3 


CC  =  62 
max 


COmax  *  74 


These  values  can  be  recomputed  to  measure  the  improvement  in  testability 
resulting  from  various  design  modifications. 


2.3  Summary  and  Evaluation 

The  approaches  used  in  TMEAS  and  SCOAP  rely  on  heuristic  but  well- 
defined  measures  of  node  controllability  of  a  digital  logic  circuit.  These 
measures  are  primarily  useful  for  measuring  the  relative  testability  of 
different  designs.  Since  they  provide  testability  measures  for  the  indi¬ 
vidual  nodes  of  a  circuit,  they  can  be  used  as  a  guide  to  the  design  modi¬ 
fications  needed  to  enhance  testability.  For  example,  an  unusually  bad 
controllability  figure  indicates  a  possible  site  for  adding  a  control  in¬ 
put  line.  It  may  also  indicate  the  location  of  an  undetectable  or  hard- 
to-detect  fault.  Similarly,  bad  observability  figures  can  also  indicate 
suitable  sites  for  adding  output  (test)  points  as  well  as  the  location  of 
faults  that  are  difficult  or  impossible  to  observe.  Besides  serving  to 
guide  the  design  modi  fiction  process,  programs  like  TMEAS  and  SCOAP  can  be 
used  to  guide  test  generation  algorithms.  For  example,  node  observability 
information  can  be  used  in  a  path  sensitization  process,  such  as  that  em¬ 
ployed  In  the  D-algorithm  [Breuer  &  Friedman  1976,  Roth  1980],  to  select  a 
path  from  a  fault  location  to  the  "most  observable"  primary  output  node 
that  can  be  reached. 
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The  major  difference  between  the  two  approaches  discussed  in  the  pre¬ 
ceding  section  lies  in  the  relative  importance  assigned  to  the  individual 
input/output  assignment  possibilities  for  a  cell.  Stephenson  and  Grason 
use  an  averaging  method,  which  appears  to  be  more  pessimistic  than  Gold¬ 
stein's  method  where  minimum-cost  assignments  are  chosen.  For  example,  in 
the  case  of  an  n-input  NANO  gate  used  as  an  example  earlier,  Stephenson  and 
Grason  obtain  an  output  controllability  value  CY(Y)=  l/2n_1,  while  the  cor¬ 
responding  figures  for  Goldstein’s  procedure  are  CC®(Y)  =  n+l  and  CC*(Y)  =  2. 
The  CY  figure  implies  that  controllability  decreases  rapidly  as  new  input 
lines  are  added  to  the  NAND  gate,  whereas  the  CC  figures  increase  slowly 
or  remain  constant  as  n  increases.  The  CY  measures  of  Goldstein  seem  to 
correspond  more  closely  to  the  intuitive  concept  of  controllability.  For 
example,  we  would  expect  CC^(Y)  to  increase  with  the  addition  of  a  new  in¬ 
put  Xn+1  since  Xn+^  imposes  an  extra  controllability  constraint,  namely  it 
must  be  set  to  1  in  addition  to  all  the  previous  constraints  on  XlfX2,...»Xn 
in  order  to  apply  0  to  the  NAND's  output  line  Y. 

From  the  meager  data  that  has  been  published,  it  appears  that  TMEAS 
and  SCOAP  are  about  equal  in  performance  and  usefulness.  Each  provides 
similar  data  on  the  controllability  and  observability  of  the  individual 
nodes  of  a  circuit.  Each  program  can  analyze  a  circuit  of  moderate  complex¬ 
ity  in  a  small  fraction  of  the  time  required  to  execute  a  conventional  test 
generation  program.  Both  TMEAS  and  SCOAP  have  been  developed  into  working 
tools  for  use  by  digital  system  designers;  and  SCOAP  is  available  to  some 
Institutions. 


3.  DESIGN  GUIDELINES 


This  chapter  reviews  the  techniques  available  for  modifying  exist¬ 
ing  logic  designs  to  improve  their  testability.  Thus  testability  is 
viewed  here  as  secondary  to  the  usual  design  goals  of  minimizing  hard¬ 
ware  cost  or  maximizing  operating  speed.  It  also  recognizes  the  fact 
that  testability  must  often  be  added  to  a  system  after  its  design  is 
essentially  complete.  Complete  design  procedures  with  testability  as 
their  primary  goal  are  examined  in  Chapter  4. 

The  methods  discussed  in  this  chapter  are  concerned  with  improving 
one  or  more  of  the  testability  measures  listed  in  Fig.  2.1.  In  many 
cases  the  goal  is  approached  indirectly  by  attempting  to  improve  con¬ 
trollability  and  observability  which,  as  shown  in  the  preceding  chapter, 
are  circuit  properties  that  are  readily  quantifiable.  Section  3.1  con¬ 
siders  the  use  of  extra  input  and  output  lines  to  increase  controllabil¬ 
ity  or  observability.  In  Sec.  3.2  methods  of  reducing  circuit  complexity  ‘ 
by  partitioning  a  circuit  into  easily  testable  subcircuits  are  discussed. 
Miscellaneous  design  issues  including  timing  control  are  discussed  in  Sec. 
3.3. 


3.1  Control  and  Test  Point  Insertion 

A  control  point  may  be  defined  as  an  independent  primary  input  line 
and  associated  circuits  added  to  a  system  to  increase  controllability. 
Figure  3.1a  shows  a  typical  example,  where  a  new  input  line  x  and  a  cir¬ 
cuit  C  are  used  to  control  the  line  y.  For  example,  if  C  is  an  EXCLUSIVE- 
OR  gate,  x  can  be  used  to  complement  y  at  will.  Similarly,  a  test  point 
is  defined  as  an  independent  primary  output  line  and  associated  circuits 
added  to  a  system  to  increase  observability.  Figure  3.1b  shows  the  simp¬ 
lest  case  where  a  new  output  line  z  is  used  by  itself  to  make  the  line  y 
directly  observable.  The  terms  control  and  test  point  are  often  restricted 
to  the  added  I/O  lines.  In  some  cases  a  single  line  may  act  a  both  a  con¬ 
trol  and  a  test  point,  in  which  case  the  more  general  term  test  point  is 
used. 
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Fig.  3.1.  (a)  Use  of  a  control  point  to  increase  controllability, 
(b)  Use  of  a  test  point  to  increase  observability. 


A  major  constraint  of  the  use  of  test  and  control  points  is  the  fact 
that  the  number  of  spare  external  connection  points,  e.g.,  IC  pins  or  PCB 
edge  connectors,  available  for  testing  purposes  is  usually  very  small. 

This  is  true  at  all  design  levels,  from  IC  chips  to  complete  systems.  Thus 
a  key  problem  here  is  to  select  a  small  number  of  test  or  control  point 
sites  that  yield  the  maximum  improvement  in  testability.  Circuit  analysis 
programs  such  as  TMEAS  and  SCOAP  (see  Chap.  2)  are  very  useful  tools  for 
this  selection  process. 

Suitable  sites  for  test  and  control  point  insertion  fall  into  four 
major  groups. 

(1)  Flip-flops  determining  the  systems'  major  control  states. 

(2)  "Long  and  narrow"  subcircuits  containing  deeply  buried 
components. 

(3)  "Short  and  wide"  subcircuits  having  high  fan-in  or  fan¬ 
out. 

(4)  Logically  redundant  subcircuits  containing  inherently 
undetectable  faults. 

Examples  of  these  cases  are  considered  in  the  sequel,  first  as  control 
point  sites,  and  then  as  test  point  sites. 

Control  Point  Selection 

In  general,  good  control  point  sites  are  those  that  are  inherently 
difficult  to  control  unless  direct  access  to  them  is  provided.  Corres¬ 
ponding  to  the  first  three  cases  listed  above  we  consider  in  turn  memory 
elements,  deeply  buried  components,  and  components  with  high  fan-in  as 
possible  locations  for  control  points. 

Memory  elements  in  the  control  unit  of  a  system  determine  the  sys¬ 
tem's  state  S;  it  is  extremely  important  to  be  able  to  control  S  for  test¬ 
ing  purposes.  This  requires  a  mechanism  that  can  initialize  S  to  a  known 
value  when  testing  begins.  It  has  been  claimed  that  almost  half  of  the 
design  problems  associated  with  sequential  circuit  testing  at  the  PCB 
level  are  due  to  the  lack  of  proper  initialization  features  [Consol la  and 
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Danner  1980].  Good  initialization  design  should  allow  the  circuit  to  be 
quickly  set  to  a  known  state  using  relatively  little  of  the  main  process¬ 
ing  circuits  which  may  be  faulty. 

Figure  3.2  shows  several  possible  approaches.  The  reset  inputs  of 
all  the  flip-flops  defining  S  can  be  connected  to  a  common  reset  line. 

This  allows  a  single  input  signal  for  the  tester  to  make  S  =  0,  and  re¬ 
quires  only  one  extra  input  line.  If  this  extra  input  line  cannot  be 
provided,  e.g.,  because  of  IC  pin  limitations,  it  can  be  replaced  by  the 
RC  circuit  of  Fig.  3.2b  which  causes  a  temporary  reset  signal  to  be  sent 
to  the  flip-flops  immediately  after  the  circuit  power  is  switched  on.  If 
more  than  one  control  input  can  be  added,  then  control  over  the  data  in¬ 
puts  of  the  flip-flops  can  be  obtained  by  allowing  one  of  several  possible 
initial  states  to  be  selected.  In  the  extreme  case,  parallel  access  can 
be  provided  to  the  data  inputs  of  all  flip-flops  allowing  any  state  to  be 
chosen  as  an  initial  state;  this  scheme  is  usually  impractical  because  of 
the  large  number  of  control  lines  it  requires.  If,  on  the  other  hand, 
serial  access  is  provided  to  the  data  inputs  of  the  flip-flops,  then  the 
system  can  be  initialized  to  any  state  using  only  one  or  two  added  inputs. 
Figure  3.2c  illustrates  this  approach.  State  information  is  loaded  ser¬ 
ially  via  the  line,  which  may  be  an  existing  primary  input  of  the  cir¬ 
cuit.  The  control  line  T  and  the  circuits  C  are  used  to  switch  the  circuit 
between  the  normal  mode  of  operation  and  a  test  mode.  During  the  test 
mode  the  flip-flops  are  chained  together  to  form  a  shift  register.  While 
any  initial  state  can  be  set  in  the  test  mode,  it  requires  n  clock  periods 
to  do  so,  where  n  is  the  number  of  flip-flops  involved.  Note  that  this 
serial  chaining  technique  is  also  used  in  several  important  general  design 
methods  to  be  discussed  in  Chap.  4. 

The  second  type  of  circuit  structure  that  suffers  from  poor  controlla¬ 
bility  is  a  "long  narrow"  circuit  where  internal  flip-flops  are  deeply  bur¬ 
ied  in  the  circuit  relative  to  the  controllable  primary  inputs.  Consider, 
for  example,  the  n-bit  counter  cirucit  appearing  in  Fig.  3.3a.  In  order 
to  test  this  circuit  by  passing  it  once  through  all  states,  a  total  of  2n 
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count  pulses  must  be  applied.  This  may  be  a  relatively  large  number.  Sup¬ 
pose  that  in  the  course  of  test  generation,  it  is  required  to  apply  1  to 
the  most  significant  bit  (MSB)  output  line  zn_j*  This  may  be  required 
to  detect  a  fault  associated  with  zn_1,  or  to  justify  a  test  pattern  for 
some  other  fault.  If  the  counter  is  initially  sent  to  the  all  0-state, 
then  the  test  generation  program  is  required  to  find  a  sequence  of  length 
2n~*  which  it  must  apply  to  the  count  input;  this  is  an  extremely  diffi¬ 
cult  task  for  a  typical  test  generation  program.  In  less  structured  cir¬ 
cuits  with  many  levels  of  flip-flops,  test  generation  can  be  even  more 
difficult. 

Control  points  can  be  used  to  alleviate  the  foregoing  problem  in  the 
manner  depicted  in  Fig.  3.3b.  Here  the  counter  is  subdivided  into  k  iden¬ 
tical  counter  stages,  each  of  n/k  bits.  A  separate  control  input  CP^  to 
stage  i  allows  a  count  pulse  to  be  directly  injected  into  that  stage  by 
the  counter,  instead  of  having  to  propagate  through  the  preceding  i-1 
stages.  Using  this  approach  the  maximum  length  of  a  count  sequence  can 
be  reduced  from  2n  to  2n/,k.  For  example  if  n*32  and  k  =  4,  this  is  a  re¬ 
duction  from  approximately  4.29 *  109  to  256,  and  can  represent  a  signifi¬ 
cant  improvement  in  testability. 

Short  wide  circuits  include  those  with  very  large  fan-in,  which  has 
a  negative  effect  on  fault  resolution.  If  many  lines  fan  in  to  a  node  N, 
then  the  origin  of  fault  signals  propagating  through  N  can  be  very  diffi¬ 
cult  to  determine.  It  is  desirable,  therefore,  to  reduce  the  ambiguity 
among  the  signals  feeding  N.  This  can  be  done  by  attaching  control  points 
to  N  that  can  be  used  to  block  internal  signals  selectively,  or  allow  sig¬ 
nals  to  be  injected  by  the  tester.  Figure  3.4  shows  the  typical  use  of  a 
control  point  for  this  purpose.  The  AND  gate  G  is  inserted  into  the  line 
feeding  node  N  which  has  very  large  fan-in,  i.e.,  it  receives  signals  from 
a  large  number  of  independent  sources. G  allows  a  tester  to  force  N  to  0 
by  setting  CP  to  0.  Note  that  an  AND  gate  is  chosen  for  G  rather  than  an 
OR  gate,  since  N  is  driven  by  a  NAND  gate  GN  whose  output  under  average 
circumstances  will  be  1  with  a  probability  of  0.96875.  An  OR  would  be 
more  appropriate  if  GN  were  a  NOR  or  AND  gate.  Some  circuit  technologies 
allow  the  gate  G  to  be  dispensed  with  entirely,  by  permitting  the  control 

line  CP  to  be  wlre-ORed  or  wlre-ANDed  directly  to  the  node  N. 
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Test Point  Selection 


Test  points  are  generally  inserted  at  points  in  a  circuit  where  sig¬ 
nal  states  are  difficult  to  observe.  As  noted  earlier,  there  are  three 
general  design  situations  where  test  points  are  useful:  the  outputs  of 
memory  elements,  the  outputs  of  deeply  buried  components,  and  components 
with  high  fan-out.  Test  points  are  usually  simple  connections  from  the 
internal  node  to  be  observed  to  a  primary  output  of  the  circuit  under 
test.  While  control  input  lines  can  usually  be  combined  and  connected 
to  a  common  input  pin,  it  is  much  more  difficult  to  combine  test  points 
to  reduce  their  pin  requirements,  since  such  combination  tends  to  corrupt 
the  information  that  is  being  observed  [Fox  1977]. 

The  outputs  of  the  memory  elements  that  determine  a  system's  state  S 
are  probably  the  most  important  points  of  a  system  to  be  made  observable 
during  testing.  The  simplest  way  to  observe  S  is  to  connect  the  memory 
output  signals  comparing  S  to  a  set  of  test  points.  If  this  is  not  pos¬ 
sible  because  of  pin  limitations,  then  the  shift  register  interconnection 
scheme  of  Fig.  3.2c  can  be  used  to  allow  the  state  of  the  flip-flops  to 
be  shifted  out  serially  via  a  single  test  point  DQUt  during  testing. 

The  outputs  of  components  that  are  deeply  buried  in  the  sense  of 
having  long  paths  between  them  and  the  system's  primary  outputs,  are  also 
good  test  point  candidates.  Similarly,  lines  with  very  high  fanout,  like 
the  node  N  in  Fig.  3.5,  are  also  suitable  test  point  sites.  Since  the  sig¬ 
nal  at  N  affects  many  succeeding  parts  of  the  circuit,  fault  resolution  can 
be  improved  by  allowing  N  to  be  directly  observed  during  testing.  Finally, 
test  points  are  very  useful  for  making  undetectable  faults  detectable. 

Such  faults  typically  can  exist  in  redundant  subcircuits  used  for  fault 
masking.  By  connecting  the  redundant  portion  of  a  circuit  to  one  or  more 
test  points,  all  previously  undetectable  faults  can  be  made  detectable. 

Bus-oriented  Systems 

Many  modern  systems  contain  one  or  more  microprocessors  and  have  a 
global  structure  in  which  buses,  including  data,  address  and  control  buses, 
form  the  main  communication  links  of  the  system.  These  buses  are  typically 


31 


the  points  of  highest  fan-in  and  fan-out  in  the  system.  They  are  there¬ 
fore  extremely  desireable  control  and  test  point  sites.  Access  to  a  sys¬ 
tem  bus  for  control  or  test  purposes  can  be  achieved  by  channelling  the 
bus  to  input  and  output  ports  of  the  system,  respectively,  which  are  read¬ 
ily  used  by  external  test  equipment.  Special  "diagnostic  ports"  may  be 
provided  for  this  purpose.  Alternatively,  a  regular  I/O  port  may  be  tem¬ 
porarily  connected  to  a  diagnostic  port  during  testing. 

This  testable  design  approach  is  taken  in  several  commercial  micro¬ 
processor-based  devices,  for  example,  the  Fairchild/Mostek  3870  one-chip 
microcomputer  [Fairchild  1980].  A  single  test  pin  TEST  is  provided  which, 
when  activated,  reconfigures  the  system  so  that  10  port  5  becomes  an  input 
to  the  system's  main  internal  data  bus,  while  10  port  4  becomes  an  output 
(test  point)  for  this  data  bus.  In  this  mode  of  operation,  which  is  de¬ 
picted  in  Fig.  3.6,  the  internal  program  ROM  is  disabled,  and  the  system 
accepts  instructions  and  operands  applied  externally  via  10  port  5.  Thus 
the„j  10  ports  constitute  a  set  of  control  and  test  points  which  allow 
relatively  complete  access  to  the  microcomputer  at  the  machine  instruction 
level.  An  extremely  important  aspect  of  this  type  of  controllability  is 
that  it  requires  the  use  of  very  few  dedicated  test  pins  or  extra  logic. 
Existing  pins  (the  pins  of  10  ports  4  and  5  in  the  present  example)  pro¬ 
vide  most  of  the  necessary  control  and  test  points. 

Another  example  of  the  use  of  existing  buses  as  test  points  is  seen 
in  testing  a  typical  microprocessor  such  as  the  Intel  8080  [Chiang  and 
McCorkill  1976].  The  CPU's  program  counter  PC  can  be  viewed  as  the  main 
controlling  memory  element  of  the  system;  its  state  is  therefore  very  im¬ 
portant  from  a  testing  viewpoint.  The  state  of  PC  can  be  observed  during 
program  execution  by  simply  monitoring  the  system  address  bus,  which  is 
directly  connected  to  PC  during  instruction  fetch  machine  cycles.  An 
external  tester  can  control  PC  by  jamming  an  instruction  such  as  NOP  (no 
operation)  onto  the  data  bus  during  an  opcode  fetch  cycle,  thereby  forc¬ 
ing  PC  to  increment  its  state  by  one.  By  repeating  this  operation,  any 
desired  state  can  be  entered  into  PC  in  at  most  2*®  steps. 

3.2  Circuit  Restructuring 

The  insertion  of  test  and  control  points  into  a  circuit  can  be  done 

In  a  way  that  leaves  the  underlyino  circuit  structure  essentially  unchanged 
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In  this  section  we  consider  ways  in  which  a  given  circuit  can  be  made 
more  testable  by  allowing  key  aspects  of  its  inherent  structure  to  be 
altered  during  testing.  Test  and  control  points  can  play  a  useful  role 
in  this  restructuring  process. 

Feedback  Modification 

Combinational  circuits  which  contain  no  feedback  are  among  the  eas¬ 
iest  to  test.  Most  logic  circuits  contain  feedback  of  the  general  form 
illustrated  in  Fig.  3.7a.  Feedback  complicates  testing  because  unanti¬ 
cipated  signals  can  propagate  back  to  the  primary  input  side  of  the  cir¬ 
cuit  via  the  feedback  loops,  thereby  interfering  with  the  application  of 
test  patterns.  A  relatively  sophisticated  test  generation  procedure  is 
needed  to  unravel  the  complexity  resulting  from  the  presence  of  feedback. 
Moreover,  test  sequence  length  tends  to  grow  rapidly  with  the  amount  of 
feedback  present  in  a  circuit. 

The  testing  of  sequential  circuits  can  thus  often  be  simplified  by 
eliminating  feedback,  wholly  or  in  part,  during  testing.  This  can  be 
done  by  breaking  the  feedback  loops,  either  by  means  of  removable  jumper 
wires,  or  else  by  means  of  control  points  as  depicted  in  Fig.  3.7b.  In 
the  latter  case,  an  external  control  signal  is  used  to  insert  a  logical 
break  in  the  feedback  lines  during  the  test  mode  of  operation.  If  the 
feedback  lines  are  also  connected  to  test  points  as  in  Fig.  3.6b,  then 
the  circuit  reduces  to  a  feedforward  combinational  circuit  that  is  rela¬ 
tively  easy  to  test,  and  also  requires  much  less  testing  time  than  the 
original  sequential  circuit.  It  is  also  worth  noting  that  many  test  gen¬ 
eration  methods  such  as  the  D-algorithm  are  most  easily  extended  to  se¬ 
quential  circuits  by  converting  a  sequential  circuit  into  an  equivalent 
(pseudo-)  combinational  circuit. 

In  systems  such  as  microcomputers  (Fig.  3.6)  the  communication  buses 
form  the  main  feedback  paths  at  the  system  level.  Thus  it  is  generally 
useful  to  be  able  to  isolate  devices  from  the  buses  during  testing.  This 
is  most  easily  accomplished  by  the  use  of  tri-state  devices  which  can  be 
electrically  and  logically  Isolated  by  driving  their  bus  connections  to 
the  high- impedance  state.  It  is  also  sometimes  useful  to  introduce  feed- 
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Fig.  3.7.  (a)  General  structure  of  a  sequential  circuit,  (b) 

Modification  to  break  feedback  loops. 


back  into  such  systems  to  facilitate  testing  by  linking  normally  disjoint 
buses.  For  example,  10  ports  may  be  tested  by  linking  their  external 
feedback  lines  so  that  they  effectively  form  a  closed  path.  This  path 
can  then  be  tested  by  writing  {output)  test  signals  to  one  port,  and 
reading  (input)  response  signals  from  the  other  port,  a  method  called 
loop-back  [Hayes  and  McCluskey  1980]. 

Partitioning 

■  In  general,  the  testability  of  a  complex  circuit  can  be  improved  by 
partitioning  it  into  small  simply-connected  modules.  Figure  3.3  shows  how 
a  long  counter  can  be  made  more  testable  by  subdividing  it  into  k  short 
counters,  each  of  which  can  be  controlled  independently.  This  results  in 
a  substantial  reduction  in  test  sequence  length,  and  also  improves  fault 
resolution.  Figure  3.8  shows  another  example  of  circuit  redesign  to  improve 
fault  resolution.  In  the  circuit  of  Fig.  3.8a  a  wired-AND  connects  the 
outputs  of  a  large  number  of  NAND  gates.  This  introduces  a  high  degree 
of  ambiguity  during  fault  isolation,  since  some  faults  affecting  the  out¬ 
put  circuits  of  the  NAND  gates  cannot  be  distinguished.  The  ambiguity 
can  be  reduced  by  a  factor  of  k  or  so  by  arranging  the  NANDs  into  k  groups 
as  shown  in  Fig.  3.8b.  Each  group  is  connected  to  the  inputs  of  the  added 
NAND  gate  G.  Since  faults  affecting  the  individual  inputs  of  G  are  dis- 
tinguishab'  ■,  we  can  effectively  isolate  faults  in  the  original  NAND  gates 
to  one  of  the  k  groups. 

A  number  of  general  techniques  for  reorganizing  a  system  design  to 
improve  its  testability  have  been  proposed.  Two  representative  examples 
are  discussed  here. 

(1)  The  COMET  technique  developed  at  Bell  Laboratories 
[Chang  and  Heimbigner  1974]. 

(2)  The  Selective  Control  technique  developed  at  IBM  [Hsu 
et  al.  1978]. 


Both  are  characterized  by  the  fact  that  the  original  design  is  partitioned 
into  relatively  small  easily-testable  subcircuits,  and  special  circuitry  is 


inserted  at  the  partition  interfaces  to  provide  direct  access  to  the  sub¬ 
circuits.  Related  recent  work  includes  a  partitioning  technique  for  com¬ 
binational  circuits  that  uses  multiplexers  as  the  partitioning  devices 
[Bozorgui-Nesbat  and  McCluskey  1980]. 

COMET  (Controllability,  Observability,  and  Maintenance  Technique) 
aims  at  enhancing  the  fault  resolution  or  diagnosability  of  a  system  [Chang 
and  Heimbigner  1974].  The  basic  idea  is  to  partition  the  system  into  sub¬ 
circuits  corresponding  to  minimum-cost  replaceable  components,  e.g.,  PC 
boards.  Faults  are  located  using  the  binary  search  approach  depicted  in 
Fig.  3.9.  First,  half  the  system,  say  P'  -  Cpi »P2*P3*P4^ *  is  disabled  so 
that  it  does  not  affect  the  testing  process.  At  the  same  time  the  rest 
of  the  system  P' = [Pg.Pg.P^.Pg]  is  enabled  and  tested.  Special  circuits 
are  added  at  the  itnerfaces  of  the  P^ 's  to  allow  P'  to  be  disabled,  and 
to  make  the  inputs  and  outputs  of  P*  controllable  and  observable,  respec¬ 
tively.  If  P"  fails  the  test,  then  a  fault  has  been  isolated  to  P*.  If 
P"  passes  the  test,  then  the  fault,  if  any  is  present,  must  lie  in  P". 

The  (potentially)  faulty  half  of  the  system  is  then  further  subdivided 
into  two  parts  F  and  P",  one  of  which  is  disabled,  while  the  other  is 
enabled  and  tested.  This  process  is  continued  until  the  partitions  corres¬ 
ponding  to  the  sma  iest  replaceable  component  Pmi.  are  reached. 

The  partitioning  method  used  in  COMET  is  based  on  graph  theory.  The 
system  under  consideration  is  represented  by  a  directed  graph,  whose  edges 
indicate  the  controllability  and  observability  relations  among  the  func¬ 
tional  units  that  constitute  the  minimal  partitions  pmi-n-  The  system 
graph  G  is  analyzed  to  identify  the  maximal  strongly  connected  (MSC)  sub¬ 
graphs  which  correspond  to  worst-case  sets  of  nodes  that  can  interfere 
with  one  another's  controllability  and  observability.  Control  and  test 
points  are  then  added  to  the  system  in  a  somewhat  ad  hoc  fashion  to  break 
up  the  MSC's  subgraphs.  Then  the  P^'s  can  be  ordered  in  a  way  that  allows 
the  diagnosis  algorithm  of  Fig.  3.9  to  be  applied.  The  added  logic  for 
subcircuit  disabling,  and  introducing  control  and  test  points  is  quite 
simple,  typically  at  most  one  gate  per  line  as  in  Fig.  3.1. 

COMET  was  evaluated  at  Bell  Laboratories  by  a  simulation  study  of  a 
small  processor  containing  a  few  thousand  gates.  The  results  reported 
indicate  that  e  high  degree  of  fault  resolution  is  achievable,  provided 
a  good  set  of  diagnostic  tests  is  available.  The  amount  of  extra  logic 
needed  to  implement  COMET  Is  unclear,  but  is  estimated  to  be  less  than 
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Fig.  3.9.  COMET:  (a)  Circuit  partitions,  (b)  Diagnostic  algorithm. 
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10  percent.  COMET  does  not  appear  to  have  been  further  developed  or  ap¬ 
plied  at  Bell  Laborities  beyond  this  feasibility  study. 

Selective  Control  is  a  technique  proposed  at  IBM  to  enhance  fault 
diagnosability  at  the  PC  board  level  [Hsu  et  al.  1978].  Its  goal  is  to 
use  ICs  to  control  the  interaction  between  the  ICs  of  the  original  cir¬ 
cuit  and  thereby  enhance  its  testability.  Specially  designed  Selective 
Control  (SC)  circuits  are  inserted  in  the  output  lines  of  the  original 
output  lines  of  the  original  circuit  as  shown  in  Fig.  3.10a.  They  allow 
these  output  lines  to  be  selectively  inhibited  or  enabled.  The  SC  cir¬ 
cuits  contain  "scan  latches"  that  can  trap  output  signals  from  the  orig¬ 
inal  circuit  for  monitoring  by  the  tester.  These  latches  can  also  be 
used  by  the  tester  to  inject  test  signals  into  the  system  that  are  inde¬ 
pendent  of  the  original  primary  input  signals.  Figure  3.10b  shows  the 
internal  structure  of  an  SC  circuit.  The  scan  latches  are  interconnected 
as  a  shift  register,  so  that  they  can  be  accessed  serially,  thereby  min¬ 
imizing  10  pin  requirements.  Data  is  transferred  from  the  scan  latches 
to  the  inhibit  latches,  thus  freeing  the  scan  latches  for  other  purposes. 

The  mode  logic  allows  the  new  primary  outputs  V  to  be  driven  either  from 
the  original  primary  outputs  Z  or  from  the  inhibit  latches.  V  can  also 
be  driven  to  the  high-impedance  state,  thus  effectively  disabling  N.  A 
diagnostic  procedure  similar  to  that  of  Fig.  3.9b  can  be  used  with  selec¬ 
tive  control. 

A  major  advantage  of  selective  control  is  that  it  standardizes  the  logic 
circuits  that  must  be  added  to  the  original  design.  The  serial  access 
method  used  for  the  scan  latches  allows  SC  circuits  to  be  chained  toge¬ 
ther  in  a  simple  modular  fashion.  The  circuit  overhead  for  selective  con¬ 
trol  is  about  20  gates  per  output  line.  Also  six  new  I/O  connections  to 
the  overall  system  are  required.  This  design  ^chnique  is  closely  related 
to  the  various  scan-in/scan-out  design  approaches  examined  in  the  next 
chapter.  Selective  Control  can  be  applied  to  an  LSI  chip,  where  the  chip 
is  first  partitioned  into  subcircuits,  and  the  subcircuits  interconnected 
where  desired  using  SC  circuits. 
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3.4  Miscellaneous  Design  Rules 


We  now  briefly  consider  some  other  important  aspects  of  design  for 
testability. 

Redundancy 

A  subcircuit  C  is  called  redundant  if  it  can  be  removed  from  the 
original  circuit  without  affecting  the  logical  behavior  of  the  latter. 
Redundancy  can  be  present  in  a  circuit  for  two  reasons:  it  may  be  an 
unintentional  result  of  careless  design,  or  it  may  be  inserted  deliber¬ 
ately  for  various  reasons.  Figure  3.11a  shows  an  example  of  a  redundant 
circuit  used  to  eliminate  a  hazard  (glitch).  The  gate  G^  is  logically 
redundant.  However,  it  is  included  in  the  circuit  to  prevent  spurious 
signals  from  appearing  on  Z  when  control  shifts  between  G^  and  Gg;  such 
signals  could  accidentally  reset  the  flip-flop.  Figure  3.11b  shows  an¬ 
other  example  of  redundancy  which  is  found  in  fault-tolerant  designs. 

This  circuit  uses  triple  modular  redundancy  (TMR)  to  allow  it  to  operate 
properly  despite  the  presence  of  faults  in  any  of  the  triplicated  units  U. 

Redundancy,  whatever  its  source,  causes  two  problem  from  the  view¬ 
point  of  testability. 

(1)  It  results  in  undetectable  faults,  which  can  result  in 
fruitless  and  costly  attempts  by  a  test  generation  pro¬ 
gram  to  find  a  test  where  none  exists. 

(2)  Faults  in  the  redundant  part  of  the  circuit  may  mask  de¬ 
tection  of  otherwise  detectable  faults  elsewhere  in  the 
circuit. 

In  the  circuit  of  Fig.  3.11a,  for  instance,  the  fault  "output  of  G3  stuck- 
at-0"  is  undetectable. 

In  general,  care  should  be  taken  to  avoid  unintentional  redundancy. 

If  redundancy  must  be  included  for  one  of  the  reasons  cited  above,  then 
some  provision  should  be  made  to  allow  the  redundancy  to  be  removed  tem¬ 
porarily  during  testing.  For  example,  by  making  the  nodes  T^,  Tg  and  T3 
in  Fig.  3.11b  into  test  points,  the  redundancy  is  effectively  removed. 

In  the  case  of  the  TMR  circuit  of  Fig.  3.11b,  the  interface  between  the 
triplicated  units  and  the  voter  provides  an  ideal  site  for  selective  con¬ 
trol  logic,  which  also  effectively  eliminates  the  redundancy. 
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Examples  of  redundant  circuits. 
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Timing  Considerations 

Asynchronous  timing  control  should  be  avoided  in  designing  easily 
testable  circuits.  Most  automatic  test  generation  systems  cannot  handle 
the  variable  delays  associated  with  asynchronous  behavior,  and  awkward 
"work-arounds"  are  often  needed  to  handle  asynchronism.  The  test  gener¬ 
ation  problem  is  also  complicated  by  the  need  to  account  for  races  and 
hazards,  which  can  be  eliminated  a  priori  by  the  use  of  synchronous  tim¬ 
ing.  Thus  synchronous  timing  control  should  be  used  wherever  possible. 

Testability  can  be  enhanced  by  providing  an  easy  way  for  allowing, 
an  external  tester  to  synchronize  with,  or  else  bypass  entirely,  the 
clock  source  of  the  unit  under  test.  For  testing  the  static  (timing  in¬ 
dependent)  characteristics  of  the  UUT,  it  is  usually  necessary  to  disable 
the  UUT's  internal  clock  and  replace  it  by  clock  signals  from  the  tester. 
Figure  3.12  shows  the  rather  simple  circuit  needed  for  this.  For  dynamic 
testing  it  should  also  be  possible  to  run  the  UUT  at  normal  operating  speed 
under  control  of  its  own  clock.  To  allow  an  external  signal  SYNC  to  syn¬ 
chronize  with  the  UUT,  an  extra  output  from  the  UUT's  clock  should  be  pro¬ 
vided  for  the  tester  as  shown  in  Fig.  3.12. 

3.4  Summary  and  Evaluation 

Various  general  design  rules  for  enhancing  testability  were  encoun¬ 
tered  in  the  preceding  sections;  they  are  summarized  in  Fig.  3.13.  Be¬ 
cause  of  the  relative  ease  with  which  controllability  and  observability 
can  be  measured,  the  insertion  of  test  and  control  points  represent  one 
af  the  most  general  and  most  useful  techniques  for  improving  a  circuit's 
testing  characteristics.  Test  and  control  point  selection  can  be  done  on 
an  ad  hoc  basis,  or  programs  like  TMEAS  and  SCOAP  can  be  used  to  evaluate 
systematically  the  potential  sites  for  test  and  control  points.  Partic¬ 
ularly  important  sites  and  key  memory  elements,  deeply  buried  elements, 
and  elements  with  large  fan-in  or  fan-out.  In  microprocessor-based  sys¬ 
tems,  the  main  buses  constitute  the  most  important  test  and  control  point 
sites. 
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•  Design  easily  ini t ial izable  circuits 

•  Avoid  redundancy 

•  Avoid  asynchronous  timing 

•  Provide  access  to  UUT&  clocks 

•  Provide  means  of  modifying  feedback  loops 

•  Provide  access  to  major  buses 

•  Use  control  points  and  test  points 

•  Use  wired  logic  cautiously 

•  Use  partitioning  and  selective  control 


Fig.  3.13.  Summary  of  major  design  rules  for  testability. 
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Another  general  approach  is  to  break  the  original  circuit  into  simpler 
subcircuits  that  can  be  tested  independently.  An  example  of  this  is  the 
breaking  of  global  feedback  loop  during  testing.  Several  systematic  ap¬ 
proaches  to  circuit  partitioning  tave  been  proposed,  including  COMET  and 
Selective  Control.  COMET  is  mainly  concerned  with  finding  good  break 
points  in  the  circuit.  Selective  Control,  on  the  other  hand,  provides 
a  systematic  and  efficient  means  of  controlling  the  interfaces  between 
partitions.  Its  main  advantages  are  the  use  of  uniform  interface  cir¬ 
cuits,  and  serial  access  to  the  interface  signals  which  minimizes  the 
need  for  additional  10  pins. 


4,  STRUCTURED  DESIGN  METHODS 


In  this  chapter  we  examine  some  complete  design  methods  that  aim  at 
producing  a  system  whose  testability  is  known  a  priori.  Testability, 
therefore,  is  the  primary  design  objective  here,  whereas  in  Chap.  3  test¬ 
ability  was  viewed  as  something  to  be  taken  care  of  after  the  fact. 

4.1  Introduction 

Because  testing  involves  many  conflicting  trade-offs,  there  is  no 
one  design  methodology  that  can  satisfy  all  design  goals  simultaneously. 

In  particular,  ease  of  testing  often  has  an  adverse  effect  on  other  cir¬ 
cuit  characteristics.  An  example  of  this  can  be  seen  in  the  design  method 
for  combinational  circuits  proposed  by  Reddy  [Reddy  1972].  Reddy's  design, 
which  appears  in  Fig.  4.1,  has  the  very  desirable  property  that  all  stuck- 
at-0/1  faults  can  be  detected  by  at  most  3n+4  test  patterns,  where  n  is 
the  number  of  primary  imputs.  Furthermore,  these  test  patterns  are  easily 
derived  independently  of  the  function  being  realized  by  the  circuit.  Only 
one  extra  I/O  line  xQ  is  required.  However,  Reddy's  circuit  is  quite  im¬ 
practical  for  most  applications  because  of  the  very  large  number  of  gates 
and  logic  levels  it  requires. 

To  be  of  practical  value,  a  design  methodology  for  ease  of  testing 
must  satisfy  the  following  criteria. 

(1)  The  overhead  in  extra  logic  circuits  used  for  testability 
should  be  small,  typically  no  more  than  10  to  20  percent 
of  the  basic  design. 

(2)  The  number  of  extra  10  pins  used  must  be  small. 

(3)  The  circuit  should  achieve  normal  performance  levels  when 
not  being  tested. 

(4)  Testing  should  be  carried  out  using  conventional  automatic 
test  equipment  with  little  or  no  special  modification. 


Very  few  general  design  approaches  are  known  that  meet  all  the  above  re¬ 
quirements.  One  such  method,  which  we  term  scan-1 n/scan-out  is  discussed 
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in  Sec.  4.2.  A  different  appraoch  of  more  restricted  applicability  based 
on  bit-slicing  is  discussed  in  Sec.  4.3. 

4.2  Scan-in/Scan-out  Methods 

The  basic  idea  underlying  this  technique  is  to  design  a  circuit  so 
that  all  its  memory  elements  (flip-flops)  can  be  linked  together  to  form 
a  shift  register  during  testing,  as  illustrated  in  Fig.  4.2.  During  nor¬ 
mal  operation  the  circuit  conforms  to  the  usual  Huffman  model  of  a  syn¬ 
chronous  sequential  machine.  During  testing,  however,  it  is  effectively 
partitioned  into  a  (large)  combinational  circuit  C  and  a  shift  register 
SR.  The  10  lines  for  C  include  primary  10  lines  of  the  original  circuit 
and  connections  to  SR.  Since  most  of  the  system's  logic  resides  in  C,  the 
major  testing  problem  is  to  apply  a  complete  set  of  test  patterns  to  C  and 
verify  the  resulting  responses. 

The  procedure  outlined  in  Fig.  4.3  is  used  to  apply  a  test  pattern  to 
C  and  check  the  result.  A  special  control  line  P  is  needed  to  switch  the 
system  between  the  normal  and  the  test  modes  of  operation;  in  the  latter 
case  the  memory  elements  are  configured  as  the  shift  register  SR.  The 
operation  scan-in  involves  serially  shifting  into  SR  a  bit  stream  XSR  rep¬ 
resenting  the  (input)  state  of  the  system.  Thus  when  the  system  is 
clocked  (Step  4  in  Fig.  4.3),  it  "sees"  the  state  X$R  and  the  primary  in¬ 
put  pattern  X^.  It  responds  by  generating  a  primary  output  pattern  Z^, 
and  a  next  state  pattern  Z^R  which  is  placed  in  the  system's  memory.  In 
the  scan-out  operation  (Step  6),  Z^R  is  shifted  serially  out  of  SR  for 
checking. 

Scan-in/scan-out  designs  have  several  very  desirable  properties. 

(1)  The  test  generation  problem  is  reduced  to  the  relatively 
easy  one  of  testing  the  combinational  circuit  C.  Effici¬ 
ent  methods  are  known  that  can  generate  complete  test  sets 
for  combinational  circuits  containing  thousands  of  gates. 

(2)  The  overhead  in  extra  logic  is  quite  small,  typically  no 
more  than  10  percent.  The  main  requirement  for  the  extra 
gates  is  to  allow  the  memory  to  be  configured  as  a  shift 
register. 
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1.  Set  the  test  mode  (P  =  l) 

2.  Shift  X$R  into  SR  (scan-in) 

3.  Set  the  normal  mode  (P  =  0) 

4.  Apply  XM  and  clock  the  system 

N 

Record  ZN 

5.  Set  the  test  mode  (P  =  l) 

6.  Shift  Z$R  from  SR  (scan-out) 

7.  Verify  (ZN,Z$R) 

Fig.  4.3.  Application  of  a  test  pattern  using  the  scan-in/ 
scan-out  method. 
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(3)  The  extra  10  pin  requirements  are  minimal.  In  some  implemen¬ 
tations  of  scan-in/scan-out,  only  a  single  extra  pin  is  used, 
namely,  the  pin  P  that  switches  the  system  between  its  normal 
and  its  test  modes. 

(4)  Apart  from  the  special  design  of  the  memory  elements,  few 
restrictions  are  imposed  on  the  circuit  design, permitting 
the  usual  design  objectives  pertaining  to  hardware  cost  and 
speed  to  be  met  without  difficulty. 


The  main  drawback  of  this  design  methodology  is  the  fact  that  the  scan-in 
and  scan-out  steps  are  relatively  slow.  Testing  time  increases  with  the 
length  of  SR,  hence  the  method  tends  to  become  unacceptably  slow  in  a  cir¬ 
cuit  with  a  large  memory,  e.g.,  a  CPU  containing  a  large  scratchpad  RAM. 

Scan-in/scan-out  methods  have  been  known  in  various  forms  under  var¬ 
ious  names  for  at  least  a  decade  [Trischler  1980].  The  approach  was  first 
completely  described  in  1973  [Williams  and  Angell  1973].  It  has  come  into 
widespread  use  with  the  advent  of  VLSI  in  the  late  1970s,  particularly 
among  mainframe  computer  manufacturers.  Among  the  better-known  implementa¬ 
tions  of  this  approach  are  Sperry  Uni  vac's  SCAN/SET  [Stewart  1978],  Nippon 
Electric's  SCAN-PATH  [Funatsu  et  al.  1978],  and  IBM's  LSSD  (Level  Sensitive 
Scan  Design)  [Eichelberger  and  Williams  1978,  Berglund  1979].  The  Selective 
Control  Method  discussed  in  Sec.  3.2  employs  a  similar  testing  philosophy. 
LSSO  combines  the  basic  scan-in/scan-out  technique  with  the  use  of  memory 
elements  and  a  clocking  mechanism  that  eliminate  most  timing  problems, 
hence  we  consider  LSSD  here  in  somewhat  more  detail. 

The  memory  part  of  an  LSSD  circuit  consists  of  storage  elements  called 
shift-register  latches  (SRLs).  An  SRL  is  composed  of  two  clocked  D-type 
flip-flops,  Lj  and  L2  interconnected  as  shown  in  Fig.  4.4.  Lj  is  the  "sys¬ 
tem'’  latch  and  corresponds  to  a  normal  flip-flop  in  non- LSSD  designs.  L2 
is  added  to  act  as  an  intermediate  storage  element  during  the  shifting  op¬ 
erations  associated  with  scan-in  and  scan-out.  Alternatively,  Lj  and  L2 
may  form  a  single  master-slave  flip-flop.  A  and  B  are  non-overlapping  clock 
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signals  which  control  the  operation  of  the  SRI.  The  design  of  the  SRL  and 
the  rules  for  the  clock  signals  are  such  that  the  system  is  level  sensitive, 
i.e.,  its  behavior  is  independent  of  circuit  and  wire  delays  within  the 
system.  It  is  therefore  free  of  hazards  and  other  error-causing  conditions. 
A  circuit  composed  of  combinational  modules  and  SRLs  is  called  an  L5SD  cir¬ 
cuit  if  it  obeys  certain  design  rules  [Eichelberger  and  Williams  1978] 
which  ensure  that 

(1)  The  circuit  as  a  whole  is  level -sensitive. 

(2)  The  SRLs  can  be  linked  to  form  a  shift  register  SR  for 
scan-in/out  operations. 

Figure  4.5  shows  a  typical  LSSD-based  circuit.  During  normal  opera¬ 
tion  the  Lj  and  L2  latches  forming  each  SRL  act  like  a  master-slave  flip- 
flop  controlled  by  the  non-overlapping  clocks  and  Cg.  During  scan-in/ 
scan-out  operations,  each  Lj  is  linked  serially  to  the  corresponding  L2; 
while  L2  is  linked  to  the  Lj  latch  in  the  preceding  SRL.  Thus  the  Lj's  are 
connected  to  form  a  shift  register  SR  with  the  serial  data  input/output 
lines  D1>n  and  DQut.  Data  is  shifted  into  or  out  from  SR  by  means  of  non¬ 
overlapping  shift  signals  applied  to  the  A  and  B  control  lines. 


4.3  Bit-slice  Design 

Scan-in/scan  out  can  be  regarded  as  a  method  of  imposing  a  regular 
structure  on  an  otherwise  irregular  design.  Another  methodology  that  pro 
duces  highly  regular  logic  design  is  bit  slicing  [Hayes  1981],  The  term 
bit-sliced  is  most  often  applied  to  microprocessors  and  similar  circuits 
that  have  the  following  characteristics: 

(1)  The  basic  module  or  (bit)  slice  Sm  performs  a  specified 
set  of  operations  F  on  operands  or  data  words  of  length 
m  bits  where  ms  1. 

(2)  A  set  of  n  copies  of  Sm  can  be  connected  In  the  form  of 
a  1-dimensional  array  or  cascade  as  depicted  in  Fig.  4.6 
so  that  the  resulting  bit-sliced  system  performs  the 
same  set  of  operations  F  on  mn-bit  words. 
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Bit  slicing  has  several  advantages  from  a  testability  point  of  view.  The 
individual  slices  are  relatively  simple;  for  example,  a  4-bit  word  size 
is  typical  of  microprocessor  slices.  This  makes  it  feasible  to  generate 
test  sets  for  individual  slices  that  have  very  high  fault  coverage,  even 
when  relatively  complex  functional  fault  models  are  used  [Sridhar  and 
Hayes  1979,  1981].  Furthermore,  the  regularity  of  bit-sliced  arrays  can 
be  exploited  to  derive  tests  for  the  complete  array  from  those  of  a  com¬ 
ponent  slice.  The  first  application  of  bit  slicing  to  enhance  testability 
was  msde  almost  20  years  ago  [Forbes  et  al.  1965].  However  the  use  of 
bit-slicing  has  become  widespread  only  in  the  last  few  years,  since  the  ap¬ 
pearance  of  the  Advanced  Micro  Devices  2900  series  of  bit-sliced  components 
[Mick  and  Brick  1980]. 

Figure  4.7  shows  a  model  C  of  a  general-purpose  processor  slice  de¬ 
veloped  for  the  study  of  fault  diagnosis  in  bit-sliced  systems  [Sridhar 
and  Hayes  1981].  It  differs  from  current  commercial  processor  slices  pri¬ 
marily  in  the  fact  that  its  word  size  is  just  one  bit.  (Note,  however, 
that  1-bit  non-bit-sliced  microprocessors  such  as  the  Motorola  14500  are 
commercially  available  [Motorola  1977].)  Test  data  for  a  one-bit  slice  of 
this  kind  can  readily  be  extended  to  larger  slices.  The  overall  structure 
of  C  is  very  similar  to  that  of  the  2901  processor  [Mick  and  Brick  1980]. 

For  testing  purposes  C  is  viewed  as  a  network  of  a  small  number  of 
register-level  modules  {M^J  such  as  multiplexers,  registers  and  a  combin¬ 
ational  ALU.  Consider  the  task  of  generating  a  test  set  Tc  for  all  func¬ 
tional  faults  in  C.  Let  T^  be  a  test  set  that  detects  all  functional  faults 
in  an  isolated  module  M^.  If  M^  is  combinational,  then  it  is  necessary  and 
sufficient  for  T^  to  be  the  set  of  all  2n  inputs  to  the  module,  where  n  is 
the  number  of  distinct  input  lines  of  M^.  If  M^  is  a  sequential  circuit, 
then  the  checking  sequence  approach  Is  used  in  constructing  the  test  set 
T.|  [Breuer  and  Friedman  1976].  This  approach  has  been  shown  to  yield  test 
sequences  of  minimal  or  near-minimal  length  in  the  case  of  the  small  sequen¬ 
tial  modules  considered  here.  When  M^  Is  a  component  of  C,  faults  In  M^ 
are  detected  by  a  set  T*,  which  when  applied  to  the  primary  inputs  of  C# 
causes  T^  to  be  applied  to  M^,  and  causes  the  responses  of  M^  to  be  propa¬ 
gated  to  the  observable  outputs  of  C.  Since  at  most  one  module  is  allowed 
to  be  faulty,  a  composite  test  set  for  the  entire  circuit  Is  obtained  by 
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combining  all  the  T*,  many  of  which  contain  common  test  patterns.  It  is 
not  difficult  to  show  that  C  can  be  tested  by  a  test  set  Tc  containing  114 
test  patterns.  Note  that  this  is  less  than  twice  the  minimum  number  of 
tests  (64)  required  to  test  the  ALU  module  Mp  alone. 

N  copies  of  C  can  be  cascaded  as  in  Fig.  4.6  to  form  an  N-bit  pro¬ 
cessor  array  Cq,Cj,. . . In  order  to  test  an  array  of  this  type,  it 
is  necessary  to  apply  the  test  set  T^.  to  each  slice  Cj  in  the  array  irre¬ 
spective  of  its  position.  In  addition,  the  responses  of  Cj  to  Tc  must  be 
propagated  to  the  observable  outputs  of  the  *rray,  which  comprise  the  lines 
Y0:YN-1  and  the  array  carry  out  line.  Most  of  the  tests  of  the  form  T*  for 
a  module  M..  in  C  can  be  applied  simultaneously  to  every  copy  of  C  in  the 
array  since  they  do  not  affect  the  interslice  shift  and  carry  lines.  Cer¬ 
tain  test  patterns  involving  the  shift  and  carry  lines  cannot  be  applied 
simultaneously  to  every  slice;  for  instance,  a  test  that  results  in  CI^CO. 
Such  cases  can  be  covered  by  applying  on  type  of  test  pattern  to  even- 
numbered  slices,  and  another  to  odd-numbered  slices.  These  test  patterns 
can  be  so  ordered  that  the  entire  array  is  completely  tested  using  the 
same  number  of  tests  as  used  for  C  alone.  Moreover,  the  tests  for  the 
array  are  easily  computed  from  the  tests  Tc  for  C.  Consequently,  testing 
a  bit-sliced  array  of  arbitrary  length  constructed  from  C  is  only  a  little 
more  difficult  than  testing  C  itself,  and  the  testing  time  is  constant. 

The  1-bit  slice  C  of  Fig.  4.7  can  be  extended  to  more  closely  resemble  com¬ 
mercial  bit  sliced  without  destroying  its  desireable  testing  properties. 

Bit-sliced  systems  of  the  foregoing  type  have  the  very  desirable  pro¬ 
perties  that  comprehensive  test  sets  are  easy  to  compute,  and  that  test 
generation  complexity  is,  at  least  to  a  first  approximation,  independent  of 
word  size.  Thus  the  fundamental  property  of  bit-sliced  systems  is  that 
their  functional  behavior  is  independent  of  word  size  can  also  be  extended 
into  the  realm  of  test  generation.  It  should  be  noted,  of  course,  that  com¬ 
mercial  processor  slices  are  often  more  complex  than  C  and  their  test  gen¬ 
eration  problems  are  correspondingly  more  difficult.  The  significance  of 
the  C  model  is  that  it  demonstrates  that  bit  slicing  can  be  used  to  build 
realistic  processors  that  are  far  easier  to  test  than  equivalent  non-bit- 
sliced  processors. 
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4.4  Summary  and  Evaluation 

Design  for  testability  involves  various  tradeoffs  between  testability, 
performance  and  hardware  costs.  A  general  design  method  must  provide  a 
high  degree  of  fault  detectability  and  resolution  with  a  relatively  low 
overhead  in  added  logic  and  10  pins.  One  of  the  few  design  approaches  that 
meets  these  goals  is  scan-in/scan-out,  of  which  IBM's  LSSD  technique  is 
the  best-known  example.  The  hardware  overhead  associated  with  LSSD  is  small 
typically  from  five  to  ten  percent  of  the  equivalent  non-LSSD  design.  Its 
use  of  serial  access  to  the  memory  elements  implies  the  need  for  very  few 
extra  10  pins,  an  especially  important  consideration  in  VLSI  designs.  The 
design  rules  for  LSSD  are  relatively  simple  and  have  minimal  impact  on  sys¬ 
tem  performance  during  normal  operation.  The  major  advantage  of  LSSD  from 
testability  viewpoint,  is  that  the  test  pattern  generation  problem  is  re¬ 
duced  to  the  relatively  simple  one  of  testing  a  combinational  circuit. 

LSSD  circuits  are  also  very  suitable  for  delay  fault  testing  [Lesser  and 
Shedletsky  1980].  The  serial  nature  of  the  scan-in/scan-out  process  makes 
testing  relatively  slow,  and  limits  the  number  of  memory  elements  that  may 
be  used.  LSSD  is  therefore  not  applicable  to  designs  containing  more  than 
a  few  hundred  memory  elements.  Scan-in/scan-out  may  also  be  unsuitable  for 
VLSI  designs  because  of  the  difficulty  of  synchronizing  extermely  long 
shift-registers  [Mead  and  Conway  1980]. 

Bit  slicing  is  a  more  specialized  design  technique  that  also  leads  to 
easily  testable  circuits.  The  simplicity  of  the  individual  slices  allows 
complex  fault  models  to  be  used,  while  the  regular  structure  of  bit-sliced 
arrays  makes  it  easy  to  extend  test  sets  from  a  single  slice  to  an  entire 
array.  In  some  cases  this  extension  can  be  made  with  little  or  no  in¬ 
crease  In  the  number  of  test  patterns  required.  Bit-slicing  is  well  suited 
to  the  design  of  processors  and  memories;  unlike  LSSD  it  is  unsuitable  for 
designing  unstructured  "random"  logic. 
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